Skip to content

Cybersecurity · Mini Project

Two-Factor Authentication Service with TOTP

TOTP enrolment via QR, backup codes and rate-limited verification

1-2 weeks build

Overview

A drop-in second-factor service that implements the RFC 6238 TOTP standard: users enrol by scanning a QR code into any authenticator app, then confirm a six-digit code on each login. Single-use backup codes cover a lost phone, and Redis-backed rate limiting blocks brute-force guessing of the code.

What makes it stand up

  • 01Standards-compliant TOTP that works with Google and Microsoft Authenticator
  • 02QR-code enrolment with a manual secret fallback
  • 03Hashed single-use backup codes for account recovery
  • 04Redis rate limiting and lockout on repeated failures
  • 05Clean REST API you can bolt onto any existing login

Module breakdown

  1. 01

    Secret setup

    Generates a per-user secret and renders the enrolment QR.

  2. 02

    Verification

    Validates codes within a time window with clock-skew tolerance.

  3. 03

    Backup codes

    Issues, hashes and consumes one-time recovery codes.

  4. 04

    Rate limiting

    Counts failures per user and enforces temporary lockouts.

  5. 05

    Integration

    REST endpoints and a React enrolment and challenge flow.

After this, you will be able to

  • Explain how TOTP derives a code from a shared secret and time
  • Defend the rate-limiting and backup-code design choices
  • Demo enrolment and login with a real authenticator app

Technology stack

  • Node.js
  • TypeScript
  • React
  • PostgreSQL
  • Redis

Complete kit

₹5,499₹9,299
-41%

Delivered in under 48 hours

Level
Mini Project
Domain
Cybersecurity
Build time
1-2 weeks
Difficulty

You receive

  • Complete, commented source code
  • 60-90 page project report (IEEE format)
  • Editable presentation deck
  • Architecture, ER and UML diagrams
  • Local setup and deployment guide
  • Sample dataset or seed data
  • Viva question bank with answers
  • One 45-minute walkthrough call
  • 30 days of doubt-clearing support
Compare tiers

Keep looking

Students also considered

Capstone

Cybersecurity

Network Intrusion Detection System

Machine-learning anomaly detection over live network traffic

  • Python
  • Scapy
  • XGBoost
  • Kafka
  • +2
₹5,499₹9,499
4.9/97 reviews
Major Project

Cybersecurity

Encrypted Storage and Steganography

Client-side AES encryption with hidden-payload image transport

  • Python
  • Django
  • AES-256
  • Steganography
  • +1
₹3,599₹6,299
4.6/109 reviews
Mini Project

Cybersecurity

Phishing URL Detection

Classify malicious links from their structure, not a blocklist

  • Python
  • scikit-learn
  • Flask
  • Pandas
₹2,999₹4,299
4.6/284 reviews